CVE-2020-26061

The CVE concerns ClickStudios Passwordstate (password manager) prior to 8.5 build 8501. The ResetPassword function does not verify whether the user is authenticated via security questions, allowing an unauthenticated, remote attacker to send a crafted HTTP request to /account/ResetPassword to set...

CVE-2020-26061: Missing Authentication for Critical Function

ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted...

PT-2020-16279

Name of the Vulnerable Software and Affected Versions ClickStudios Passwordstate Password Reset Portal versions prior to 8501 Description The issue concerns an authentication bypass. Specifically, the ResetPassword function does not validate whether the user has successfully authenticated using...

Click Studios Passwordstate Cross-Site Scripting Vulnerability

Click Studios Passwordstate is a web-based password manager from Click Studios Australia. A cross-site scripting vulnerability exists in versions prior to Click Studios Passwordstate 8.3 Build 8397. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via ...

CVE-2018-14776

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document...

Hardcoded credentials

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document...

CVE-2018-14776

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document...

CVE-2018-14776

CVE-2018-14776 affects Click Studios Passwordstate (web-based password manager) prior to version 8.3 Build 8397. The vulnerability is an authenticated-user cross-site scripting (XSS) flaw triggered by uploading an HTML document, enabling injection of arbitrary script when viewed by other authenti...

CVE-2018-14776

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document...

PT-2018-12715

Name of the Vulnerable Software and Affected Versions Passwordstate versions prior to 8.3 Build 8397 Description The issue allows cross-site scripting XSS by authenticated users through an uploaded HTML document. Recommendations For versions prior to 8.3 Build 8397, update to version 8.3 Build 83...

CVE-2018-14776: Improper Neutralization of Input During Web Page Generation

Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document...